Jim Gough says the protocol part of MCP does little beyond client-server exchange, so the year of work at Morgan Stanley went into an architecture-as-code path that has put more than 110 APIs into production.
Reality
- Evidence38
- Adoption45
- Hype gap+5
- Incentives60
- Confidence45
A developer turned on GraalVM 25's Advanced Obfuscation to ship closed Quarkus service implementations inside an open Community edition. Oracle's documented carve-out, -H:Preserve, then broke the build by pulling unreachable types in.
Reality
- Evidence58
- Adoption18
- Hype gap−8
- Incentives72
- Confidence46
Beta 1 arrives in September with breaking changes frozen, leaving about two months of testing before general availability, and Quarkus 3.40 LTS has community maintenance until September 2027 for teams that need longer.
Reality
- Evidence55
- Adoption20
- Hype gap+15
- Incentives45
- Confidence55
The 2026.03.0 image will not boot without LOCALSTACK_AUTH_TOKEN, and the acknowledgement bypass expired on April 6. Teams pinning the archived Community build get no further security updates, and a free MIT-licensed emulator has moved into the gap.
Reality
- Evidence34
- Adoption
- Insufficient
- Hype gap+45
- Incentives72
- Confidence40
A gateway ACL and a backend router are separate parsers with no agreed decode order, which is why /%2Fadmin still lands. Normalizing earlier relocates the window; refusing ambiguous paths is what closes it.
Reality
- Evidence58
- Adoption57
- Hype gap+18
- Incentives22
- Confidence60
JEP 542 is now Targeted for JDK 28, finalising the PEM API after three preview rounds. The final version drops the DEREncodable name, so preview-era code needs one mechanical edit before it compiles again.
Reality
- Evidence62
- Adoption38
- Hype gap−8
- Incentives35
- Confidence63
Wiz says a TeamCity honeypot exposing JDWP was mining Monero within hours, and GreyNoise counted more than 6,000 unique IPs scanning for the protocol in 90 days.
Reality
- Evidence63
- Adoption52
- Hype gap+12
- Incentives70
- Confidence58